#6317. We will by default always run a --dry-run before actually upgrading and then ask the user for confirmation to execute those updates. Alternatively a user can use an option --yes to avoid asking for confirmation.